Yup, that's it. Use a single piece of unmanaged code and all security and stability guarantees are shot to hell. OTOH, it lets you do things that .NET either can't, or can't do efficiently.